Threats tagged 'ghsa-32fr-75xx-54f3'

The Sencore SMP100 SMP Media Platform with firmware versions V4.2.160, V60.1.4, and V60.1.29 is vulnerable to session hijacking due to improper session management on the /UserManagement.html endpoint. Attackers on the same network who have access to a logged-in session can add new users without authentication, leading to unauthorized system access. This vulnerability has a medium severity rating with a CVSS score of 5.7.